CVE-2008-0508: Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks...

Security readout for executives and security teams

This is a WordPress plugin administration issue from 2008. If an administrator is tricked while logged in, a remote attacker could change a Dean's Permalinks Migration setting. The public description says this was demonstrated by placing an XSS sequence in that setting, so compromised configuration could create follow-on browser risk. Exposure appears limited to WordPress sites running Dean's Permalinks Migration 1.0, especially where administrators can be induced to visit attacker-controlled content while authenticated. The bundled affected-product metadata is incomplete, so confirm exposure by local plugin inventory rather than CPE matching. Treat this as a legacy WordPress cleanup issue unless the affected plugin is found in production. Prioritize confirmation because the business impact depends on whether old, rarely used migration code remains installed on administrator-accessible sites. Mitigation focus: Identify any WordPress sites running Dean's Permalinks Migration 1.0.; Disable or remove the plugin if it is not still required.; Check vendor or trusted advisory guidance for any supported fixed version..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.